sedcli and libsed overview

TCG Opal is an industry standard allowing Self-Encrypting Drives management, i.e. enable locking, configuring users, locking ranges etc.

Sedcli is an utility for managing NVMe SEDs that are TCG Opal complaint.

Libsed is a library allowing to programatically manage NVMe SEDs that are TCG Opal complaint.

Getting started

In order to get started use following steps (<sedcli> denotes top level directory for sedcli):

# download sedcli sources
git clone https://github.com/sedcli/sedcli.git

# navigate to source directory
cd <sedcli>/src

# perform build environment configuration and run compilation
./configure
make
make install

# invoke sedcli help to available commands and its syntax
sedcli -H

# alterntively read sedcli man page
man sedcli

For more information goto doc directory.

Features

• Interactive management of NVMe SED allowing to: configure locking, change lock state, revert disk back to manafactured state
• Coming soon: auto management with disk key being retrieved from network attached Key Management Server that is OASIS KMIP complaint

Talks and papers

• SNIA SDC 2019: Data at Rest Protection at Scale with NVMe and Opal

Contributing

We encourage contributions! Patches are accepted via pull request:

• Contributions into sedcli are accepted on GPL-2.0-or-later license
• Contributions into libsed are accepted on LGPL-2.1-or-later license
• Patches must be signedoff by the developer. This indicates that submitter agrees to the Developer Certificate of Origin DCO

Maintainers

• Andrzej Jakowski [email protected]; github @AndrzejJakowski
• Revanth Rajashekar [email protected]; github @RevanthRajashekar

Feel free to contact us anytime with questions, feedback or suggestions. We would love to hear how you see sedcli going forward.